mirror of
https://github.com/discourse/discourse.git
synced 2025-02-25 18:55:32 -06:00
We are now explicitly whitelisting all parameters for Post creation. A nice side-effect is that it cleans up the #create action in PostsController. We can now trust that all parameters entering PostCreator are of a safe scalar type.